Senior Cyber GRC Specialist

S&P Global Mobility; Monterrey; Ibrido; MXN 850.000 - 1.276.000; Tempo pieno

Descrizione del lavoro

Mobility Global is hiring a cybersecurity compliance professional to lead governance, risk, and compliance efforts. You will coordinate certifications (SOX ITGC, ISO 27001, SOC 2, TISAX), respond to customer security questionnaires, and maintain control narratives and evidence across audits.

You will collaborate with Sales, Legal, Security, Privacy, and Product teams, building dashboards and reporting for leadership.

Competenze

• Bachelor’s degree or equivalent in a related field or equivalent work experience.
• 4–6 years in cybersecurity compliance, IT audit, risk management, governance, or information security.
• Experience supporting SOX ITGC, ISO 27001, SOC 2, or TISAX with audit evidence.
• Experience responding to customer security questionnaires and assurance activities.
• Strong written and verbal communication; ability to explain technical concepts clearly.

Mansioni

• Support development, execution, and continuous improvement of the enterprise GRC program.
• Coordinate SOX ITGC, ISO 27001, SOC 2, and TISAX certifications and evidence maintenance.
• Serve as primary coordinator for customer security questionnaires, RFIs, RFPs, and assessments.
• Maintain knowledge base of responses, control narratives, certifications, and evidence.
• Coordinate audits and track findings and remediation through completion.
• Support readiness assessments, gap analyses, and annual attestations.
• Monitor regulatory and cybersecurity requirements and emerging trends.
• Support cyber risk assessments, control reviews, and third‑party vendor assessments.
• Maintain dashboards, metrics, and risk reporting for leadership and governance.

Conoscenze

Cybersecurity compliance

IT audit

Risk management

Governance

Information security

Communication skills

Formazione

Bachelor’s degree in Cybersecurity / IT / IS / Risk Management / Business or related field

Descrizione del lavoro

Location: Monterrey, Mexico | Employer: R.L. Polk, S. de R.L. de C.V.

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we are creating new opportunities for our customers, our business, and our people.

CARFAX, a division of Mobility Global, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. Shop, Buy, Service, Sell – Show me the CARFAX™.

What You’ll Do

• Support the development, execution, and continuous improvement of the enterprise Cyber Governance, Risk, and Compliance (GRC) program, including security policies, standards, procedures, and control frameworks.
• Coordinate compliance activities for SOX IT General Controls (ITGC), ISO 27001, SOC 2, and TISAX certifications and assessments, including the collection, validation, and maintenance of compliance evidence.
• Serve as the primary coordinator for customer security questionnaires, due diligence requests, RFIs, RFPs, and security assessments, partnering with Sales, Legal, Security, Privacy, and Product teams to provide accurate and timely responses.
• Maintain a knowledge repository of approved responses, control narratives, certifications, and evidence, and develop customer-facing security documentation such as security overviews, control summaries, and compliance attestations.
• Coordinate internal, external, customer, and third-party audits by facilitating auditor requests and tracking findings and remediation activities through completion.
• Support readiness assessments, gap analyses, and annual certification and attestation processes, while monitoring emerging regulatory and cybersecurity requirements.
• Support enterprise cyber risk assessments, control effectiveness reviews, and third-party vendor security assessments, analyzing findings to identify trends and opportunities for control improvement.
• Maintain compliance dashboards, metrics, and risk reporting for leadership and governance committees.
• Build strong working relationships across Security, IT, Engineering, Legal, Privacy, Procurement, Internal Audit, and the business, and educate stakeholders on compliance obligations, control requirements, and audit preparedness.

What We’re Looking For

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or equivalent work experience.
• 4-6 years of experience in cybersecurity compliance, IT audit, risk management, governance, or information security.
• Experience supporting one or more of SOX ITGC, ISO 27001, SOC 2, or TISAX, including gathering, validating, and maintaining audit evidence.
• Experience responding to customer security questionnaires and conducting customer assurance activities, with an understanding of information security controls, risk management principles, and audit methodologies.
• Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders, and strong organizational skills to manage multiple priorities.

Preferred Qualifications

• Professional certifications such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or CGRC (formerly CAP).
• Experience with GRC platforms such as LogicGate, ServiceNow GRC, OneTrust, or similar tools.
• Knowledge of automotive cybersecurity requirements and TISAX assessment processes.
• Experience supporting cloud environments, including Azure, AWS, or Google Cloud Platform.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, and privacy regulations.

This is a hybrid role. The in-office and remote arrangement will be set out in the employment contract.

Applicants must be legally authorized to work in Mexico at the time of hire. The company is unable to provide immigration or work permit support for this position.

The gross annual base salary for this position is $850,000 – $1,276,000 MXN. The final offer will be based on experience, skills, and qualifications, consistent with the principle of equal pay for equal work.

Equal Opportunity

Mobility Global is committed to equal opportunity and non-discrimination in accordance with Mexican law. Hiring decisions are not based on origin, sex, gender, sexual orientation, age, disability, health, pregnancy, religion, marital status, appearance, or any other characteristic protected by law. We provide reasonable accommodations for candidates with disabilities.

Privacy Notice

R.L. Polk, S. de R.L. de C.V., with address at Avenida Constitución 2050, Monterrey, NL 64000, Mexico, processes your personal data to evaluate your application. Please do not include sensitive personal data or a photo in your CV.

Recruitment Fraud Alert

Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.